Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier: vccrGxezYD3Ti+oEzk7xjsYmfk391Q03JfTGcS6U4/g=
Subject key identifier: 1B:2E:EE:E2:12:F2:3B:32:6A:94:09:D7:4E:D9:12:F6:B2:36:B1:1A
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 019A4E18EED3BE6F296902DF35503A14116E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number: 0D9A
Signing time: Tue 04 Nov 2025 09:00:48 +0000
Manifest this update: Tue 04 Nov 2025 09:00:48 +0000
Manifest next update: Wed 05 Nov 2025 09:00:48 +0000
Files and hashes: 1: 1SW-2xi11V63HCREW8hUdL3tZmw.roa (hash: cOv7Oi38iBDrDb9WZ2Ip3z9u0lLKK3yHhjWLwQyWMKM=)
2: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: IZc0pvMLCkeu+Ypz0gtxv05slynHCh2+CWJcRcuFXEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ee:d3:be:6f:29:69:02:df:35:50:3a:14:11:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: Nov 4 09:00:48 2025 GMT
Not After : Nov 5 09:00:48 2025 GMT
Subject: CN=1b2eeee212f23b326a9409d74ed912f6b236b11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:4c:85:a0:5e:d6:3e:ae:15:f5:89:88:b4:
9d:df:90:e5:cb:cc:41:9a:e3:d5:9a:2d:fb:cd:24:
f2:64:db:cc:06:a8:ea:33:df:c5:6f:77:c0:9f:f4:
e0:90:48:c2:5d:28:34:c3:50:b1:3a:ce:d7:35:36:
1b:73:fb:66:70:fd:b0:c8:7b:a7:30:fb:2a:45:15:
c9:21:bb:a6:ea:e9:d9:56:83:48:42:39:6c:fd:d0:
da:1b:4e:a3:04:fb:54:a9:d6:38:7b:d8:2c:c9:db:
d2:df:9c:b3:4c:13:2a:09:33:b5:c5:6f:44:d5:ca:
61:5a:a7:ec:e2:c9:e6:5a:16:d3:b8:2b:27:5b:38:
db:e3:7f:e7:b1:c6:35:6b:1d:6b:b3:27:1c:41:cc:
52:30:b7:18:1c:c8:c0:2b:fc:76:9e:55:42:42:e3:
15:8f:0c:bb:d1:d2:49:6c:cd:7a:fd:88:04:c9:06:
c5:d6:49:8a:bd:ef:f8:70:a7:9f:67:eb:ab:5c:09:
37:df:bf:3f:a3:4d:7d:01:28:30:a5:65:69:8b:40:
94:07:f9:8f:51:fd:09:8a:0e:be:ae:f7:24:6f:dc:
a5:85:9a:9f:fb:82:92:a5:d6:10:01:70:b6:09:bd:
b9:b9:70:51:3b:4f:af:e3:8f:b2:ae:93:c6:30:95:
db:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2E:EE:E2:12:F2:3B:32:6A:94:09:D7:4E:D9:12:F6:B2:36:B1:1A
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1a:32:54:2f:96:1a:cd:36:61:cd:a1:10:88:b8:f3:73:5e:
00:37:9d:d1:8e:e4:76:47:16:d7:c6:cc:f8:2e:22:47:72:a6:
2c:f6:ae:b4:25:33:e9:e6:1e:5e:61:96:aa:e3:a9:a3:50:f4:
d9:57:fd:5a:4f:e9:b3:56:ad:c8:e3:ea:14:23:f9:c1:43:ef:
5a:80:56:f6:7a:79:2e:4f:04:d7:b8:f4:92:e4:6c:47:dc:25:
67:af:6a:8f:69:01:46:4f:69:74:73:cc:5c:be:b5:6d:8b:52:
c4:9b:72:0f:96:8a:5c:cc:be:12:3c:11:55:88:36:ed:e5:86:
9f:e0:2f:95:58:ae:5a:5d:96:fc:d1:80:34:18:9c:d2:7b:fb:
1e:bb:aa:9c:fd:2b:59:86:8e:87:5c:d7:dc:fe:7f:e1:82:02:
5c:e9:4d:ee:08:19:7f:0f:7b:ec:9a:61:2a:44:b4:0d:19:2d:
13:6c:fc:ad:a9:f0:42:ec:58:b9:bc:18:50:65:b3:d1:61:d3:
89:96:4f:f8:2f:ea:00:1f:ff:83:61:aa:e1:aa:1e:54:72:a7:
a3:61:3d:3d:78:7b:ad:bf:d9:a0:01:bb:34:cf:94:54:1a:86:
b3:94:30:f3:9b:92:01:3e:7d:79:51:5b:ef:e4:db:85:7b:70:
be:ba:6a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:37:34 2025 by rpki-client